chore: open-source community health (LICENSE, contributing, CI)

[emanmunir]

Summary

This PR makes the repository easier to adopt as an open source project: legal clarity, contributor onboarding, security reporting, lightweight CI, and documentation of how the plugin fits together.

Changes

• LICENSE — MIT text in repo root (matches \plugin.json\ \license\ field).
• CONTRIBUTING.md — fork/PR flow, command ↔ skill parity, version bumps, frontmatter conventions, commit prefixes.
• CODE_OF_CONDUCT.md — Contributor Covenant 2.1.
• SECURITY.md — filesystem scope and private reporting (GitHub Security + email).
• CHANGELOG.md — Keep a Changelog format; v3.0.1 documents this batch; README changelog points here.
• GitHub — bug + feature issue templates, PR template with checklist.
• docs/ARCHITECTURE.md — flow from slash command to ~/Documents/Claude/memory/.
• CI — .github/workflows/validate.yml\ runs on push/PR to \main: JSON parse for \plugin.json, \scripts/check_repo.py\ for frontmatter on commands/skills (and .claude/commands\ when present).
• README — badges (license + CI), For contributors section, v3.0.1 summary line.
• plugin.json — version 3.0.1 (repo hygiene + CI; no command text changes).

Test plan

• \python scripts/check_repo.py\ passes locally (18 markdown files on current \main-shaped tree).

Notes for maintainers

• Please confirm SECURITY.md / CODE_OF_CONDUCT contact emails (\security@brightwayai.com, \conduct@brightwayai.com) or replace with preferred addresses.
• The CI badge targets \BrightWayAI/session-memory-plugin; it will show no workflow or failing until this PR merges (expected).
• v3.0.1 will trigger the existing marketplace notify workflow on merge to \main\ — if you prefer not to bump \plugin.json\ until a functional release, say so and we can drop the version bump and move the CHANGELOG section under [Unreleased]\ only.

Made-with: Cursor

Made with Cursor